Skip to content
OpenAdvisories

Package · npm

bootstrap-tagsinput

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2016-1000227

    Cross-Site Scripting in bootstrap-tagsinput

    All versions of `bootstrap-tagsinput` are vulnerable to cross-site scripting when user input is passed into the `itemTitle` parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. ## Recommendation This package…

    bootstrap-tagsinput npm